User authentication mechanisms in Operating Systems - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is user authentication in operating systems?

User authentication is the process of verifying the identity of a user before granting access to the system or resources.

beginner

Name three common types of user authentication mechanisms.

The three common types are: 1) Something you know (passwords, PINs), 2) Something you have (security tokens, smart cards), 3) Something you are (biometrics like fingerprints or facial recognition).

intermediate

What is two-factor authentication (2FA)?

Two-factor authentication requires users to provide two different types of authentication factors, such as a password plus a code sent to their phone, to increase security.

beginner

Why are passwords alone often not enough for secure authentication?

Passwords can be guessed, stolen, or cracked. They may be weak or reused, making systems vulnerable to unauthorized access.

intermediate

What role do biometrics play in user authentication?

Biometrics use unique physical traits like fingerprints or facial features to verify identity, providing a convenient and hard-to-forge authentication method.

Which of the following is NOT a common authentication factor?

A Something you want

B Something you have

C Something you know

D Something you are

Authentication factors include something you know, have, or are. 'Something you want' is not an authentication factor.

What does two-factor authentication (2FA) improve?

A Security by requiring two different authentication methods

B User convenience

C System speed

D Password complexity

2FA improves security by requiring two different types of authentication factors.

Which authentication method uses fingerprints?

A Password

B Token

C Biometrics

D PIN

Biometrics use physical traits like fingerprints for authentication.

Why might passwords alone be insecure?

A They are biometric data

B They are always too long

C They require special hardware

D They can be guessed or stolen

Passwords can be guessed, stolen, or cracked, making them less secure alone.

Which of these is an example of 'something you have' authentication?

A Fingerprint

B Security token

C Password

D Retina scan

'Something you have' includes items like security tokens or smart cards.

Explain the three main types of user authentication factors with examples.

Think about what you remember, what you carry, and what you physically are.

Describe why combining multiple authentication factors improves security.

Consider how layers of security work together.

Practice

1. Which of the following is the primary purpose of user authentication in operating systems?

easy

A. To verify the identity of a user before granting access

B. To speed up the system performance

C. To backup user data automatically

D. To install software updates

Solution

1. Step 1: Understand the role of authentication

   User authentication is designed to confirm who a user is before allowing access to system resources.

2. Step 2: Identify the correct purpose

   Among the options, only verifying user identity matches the purpose of authentication.

3. Final Answer:

   To verify the identity of a user before granting access -> Option A

4. Quick Check:

   Authentication = Verify identity [OK]

Hint: Authentication means confirming who you are [OK]

Common Mistakes:

• Confusing authentication with system performance
• Thinking authentication backs up data
• Mixing authentication with software updates

2. Which of the following is the correct syntax to prompt a user for a password in a Linux terminal?

easy

A. sudo

B. login

C. passwd

D. passwd -l

Solution

1. Step 1: Identify command to change or prompt password

   The passwd command is used to set or change a user's password in Linux.

2. Step 2: Check other options

   login starts a login session, sudo runs commands with elevated rights, and passwd -l locks the password, not prompts for it.

3. Final Answer:

   passwd -> Option C

4. Quick Check:

   passwd prompts for password [OK]

Hint: Use passwd to set or change passwords [OK]

Common Mistakes:

• Using sudo to prompt password directly
• Confusing login with password prompt
• Thinking passwd -l prompts password

3. Consider a system that uses two-factor authentication combining a password and a fingerprint scan. What is the main benefit of this approach?

medium

A. It improves security by requiring two different proofs of identity

B. It reduces the need for biometric devices

C. It allows users to skip entering passwords

D. It speeds up the login process significantly

Solution

1. Step 1: Understand two-factor authentication (2FA)

   2FA requires two different types of evidence to prove identity, such as something you know (password) and something you are (fingerprint).

2. Step 2: Identify the benefit

   This combination improves security by making unauthorized access harder, as both factors must be compromised.

3. Final Answer:

   It improves security by requiring two different proofs of identity -> Option A

4. Quick Check:

   2FA = Two proofs for better security [OK]

Hint: Two-factor means two different identity proofs [OK]

Common Mistakes:

• Thinking 2FA removes password requirement
• Believing 2FA reduces biometric device use
• Assuming 2FA always speeds login

4. A system administrator notices users complaining about frequent lockouts after entering correct passwords. Which of the following is the most likely cause?

medium

A. The system uses biometric authentication only

B. Account lockout policy triggers after multiple failed attempts

C. Users are not using two-factor authentication

D. Password complexity rules are too strict

Solution

1. Step 1: Analyze the lockout issue

   Frequent lockouts after correct password entries suggest the system locks accounts after several failed attempts to prevent unauthorized access.

2. Step 2: Identify the cause

   This behavior matches an account lockout policy that triggers after multiple failed login attempts, possibly due to typing errors or delays.

3. Final Answer:

   Account lockout policy triggers after multiple failed attempts -> Option B

4. Quick Check:

   Lockouts = Account lockout policy [OK]

Hint: Lockouts often caused by strict lockout policies [OK]

Common Mistakes:

• Assuming biometric-only causes lockouts
• Blaming password complexity for lockouts
• Thinking lack of 2FA causes lockouts

5. An organization wants to improve security by implementing multi-factor authentication (MFA). Which combination below best represents MFA?

hard

A. Password and username

B. Fingerprint scan and facial recognition

C. Password and password hint

D. Security token and password

Solution

1. Step 1: Understand multi-factor authentication (MFA)

   MFA requires two or more different types of authentication factors: something you know (password), something you have (token), or something you are (biometrics).

2. Step 2: Evaluate options for different factor types

   Password and username uses two knowledge factors (username and password), not MFA. Fingerprint scan and facial recognition uses two biometrics (both something you are), not MFA. Password and password hint uses password and hint (both knowledge). Security token and password uses a security token (something you have) and password (something you know), which is MFA.

3. Step 3: Choose the best MFA example

   Security token and password is best because it clearly uses two distinct factor types: token and password.

4. Final Answer:

   Security token and password -> Option D

5. Quick Check:

   MFA = Different factor types combined [OK]

Hint: MFA needs different factor types, not just passwords [OK]

Common Mistakes:

• Thinking username and password is MFA
• Confusing password hint as a factor
• Ignoring the need for different factor categories